cross account cross region API gateway lambda integration

0

I need to create a Cross account and cross-region API gateway and lambda Integration. I have my API gateway in Account A and Region 1 (It is already associated with a lambda function in the same region and account) .. now I want to integrate this API gateway with a lambda function in Account B and Region 2.

Any reference to documentation or blogs will be appreciated.

2개 답변
0

Hello.

If it is cross-account, you can use Lambda with the settings in the document below.
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-cross-account-lambda-integrations.html

However, we have confirmed that it does not work well in the case of cross regions.
I will check it a bit more.

profile picture
전문가
답변함 3달 전
profile pictureAWS
전문가
검토됨 3달 전
  • We were able to confirm that it can be used cross-account if Lambda is in the same region as API Gateway. Although the cause is unknown in the case of a different region, we have confirmed that the following permission error occurs even if a resource-based policy is attached to Lambda.

    Execution failed due to configuration error: Invalid permissions on Lambda function
    
  • Hi Riku and Didier, I get a different error while testing the API gateway integration after attaching the necessary resource-based policy to the lambda: Latency 119 Status 500 Response body {"message": "Internal server error"} Response headers { "x-amzn-ErrorType": "InternalServerErrorException" }

0

Hi,

Like Riku, I believe that API GTW and Lambda must be in same region (but not necessarily in same account).

So, you can create a proxy Lambda that will get the input payload from Account A in Region 1 to call Lambda in region 2. You can go with a direct Lamdda invoke() from the proxy Lambda to call the real one.

Best,

Didier

profile pictureAWS
전문가
답변함 3달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인